mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-19 07:15:23 +00:00
gcloud: Wed Sep 14 09:28:28 UTC 2022
This commit is contained in:
parent
e7bec9b31b
commit
8f4214beb2
148 changed files with 5778 additions and 334 deletions
94
gcloud/compute/backend-services/add-iam-policy-binding
Normal file
94
gcloud/compute/backend-services/add-iam-policy-binding
Normal file
|
|
@ -0,0 +1,94 @@
|
|||
NAME
|
||||
gcloud compute backend-services add-iam-policy-binding - add an IAM policy
|
||||
binding to a Compute Engine backend service
|
||||
|
||||
SYNOPSIS
|
||||
gcloud compute backend-services add-iam-policy-binding
|
||||
(BACKEND_SERVICE : --region=REGION) --member=PRINCIPAL --role=ROLE
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Add an IAM policy binding to a Compute Engine backend service.
|
||||
|
||||
EXAMPLES
|
||||
To add an IAM policy binding for the role of
|
||||
'compute.loadBalancerServiceUser' for the user 'test-user@gmail.com' with
|
||||
backend service 'my-backend-service' and region 'REGION', run:
|
||||
|
||||
$ gcloud compute backend-services add-iam-policy-binding \
|
||||
my-backend-service --region=REGION \
|
||||
--member='user:test-user@gmail.com' \
|
||||
--role='roles/compute.loadBalancerServiceUser'
|
||||
|
||||
See https://cloud.google.com/iam/docs/managing-policies for details of
|
||||
policy role and member types.
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Backend service resource - The backend service for which to add the IAM
|
||||
policy to. The arguments in this group can be used to specify the
|
||||
attributes of this resource. (NOTE) Some attributes are not given
|
||||
arguments in this group but can be set in other ways. To set the project
|
||||
attribute:
|
||||
◆ provide the argument backend_service on the command line with a fully
|
||||
specified name;
|
||||
◆ set the property core/project;
|
||||
◆ provide the argument --project on the command line.
|
||||
|
||||
This must be specified.
|
||||
|
||||
BACKEND_SERVICE
|
||||
ID of the backend service or fully qualified identifier for the
|
||||
backend service. To set the backend_service attribute:
|
||||
▸ provide the argument backend_service on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--region=REGION
|
||||
The name of the Google Compute Engine region. To set the region
|
||||
attribute:
|
||||
▸ provide the argument backend_service on the command line with a
|
||||
fully specified name;
|
||||
▸ provide the argument --region on the command line;
|
||||
▸ set the property compute/region.
|
||||
|
||||
REQUIRED FLAGS
|
||||
--member=PRINCIPAL
|
||||
The principal to add the binding for. Should be of the form
|
||||
user|group|serviceAccount:email or domain:domain.
|
||||
|
||||
Examples: user:test-user@gmail.com, group:admins@example.com,
|
||||
serviceAccount:test123@example.domain.com, or
|
||||
domain:example.domain.com.
|
||||
|
||||
Some resources also accept the following special values:
|
||||
◆ allUsers - Special identifier that represents anyone who is on the
|
||||
internet, with or without a Google account.
|
||||
◆ allAuthenticatedUsers - Special identifier that represents anyone
|
||||
who is authenticated with a Google account or a service account.
|
||||
|
||||
--role=ROLE
|
||||
Role name to assign to the principal. The role name is the complete
|
||||
path of a predefined role, such as roles/logging.viewer, or the role ID
|
||||
for a custom role, such as
|
||||
organizations/{ORGANIZATION_ID}/roles/logging.viewer.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the compute/v1 API. The full documentation for this API
|
||||
can be found at: https://cloud.google.com/compute/
|
||||
|
||||
NOTES
|
||||
These variants are also available:
|
||||
|
||||
$ gcloud alpha compute backend-services add-iam-policy-binding
|
||||
|
||||
$ gcloud beta compute backend-services add-iam-policy-binding
|
||||
|
||||
97
gcloud/compute/backend-services/get-iam-policy
Normal file
97
gcloud/compute/backend-services/get-iam-policy
Normal file
|
|
@ -0,0 +1,97 @@
|
|||
NAME
|
||||
gcloud compute backend-services get-iam-policy - get the IAM policy for a
|
||||
Compute Engine backend service
|
||||
|
||||
SYNOPSIS
|
||||
gcloud compute backend-services get-iam-policy
|
||||
(BACKEND_SERVICE : --region=REGION) [--filter=EXPRESSION]
|
||||
[--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
gcloud compute backend-services get-iam-policy displays the IAM policy
|
||||
associated with a Compute Engine backend service in a project. If formatted
|
||||
as JSON, the output can be edited and used as a policy file for
|
||||
set-iam-policy. The output includes an "etag" field identifying the version
|
||||
emitted and allowing detection of concurrent policy updates; see $ {parent}
|
||||
set-iam-policy for additional details.
|
||||
|
||||
EXAMPLES
|
||||
To print the IAM policy for a given backend service, run:
|
||||
|
||||
$ gcloud compute backend-services get-iam-policy \
|
||||
my-backend-service --region=REGION
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Backend service resource - The network to display the IAM policy for. The
|
||||
arguments in this group can be used to specify the attributes of this
|
||||
resource. (NOTE) Some attributes are not given arguments in this group but
|
||||
can be set in other ways. To set the project attribute:
|
||||
◆ provide the argument backend_service on the command line with a fully
|
||||
specified name;
|
||||
◆ set the property core/project;
|
||||
◆ provide the argument --project on the command line.
|
||||
|
||||
This must be specified.
|
||||
|
||||
BACKEND_SERVICE
|
||||
ID of the backend service or fully qualified identifier for the
|
||||
backend service. To set the backend_service attribute:
|
||||
▸ provide the argument backend_service on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--region=REGION
|
||||
The name of the Google Compute Engine region. To set the region
|
||||
attribute:
|
||||
▸ provide the argument backend_service on the command line with a
|
||||
fully specified name;
|
||||
▸ provide the argument --region on the command line;
|
||||
▸ set the property compute/region.
|
||||
|
||||
LIST COMMAND FLAGS
|
||||
--filter=EXPRESSION
|
||||
Apply a Boolean filter EXPRESSION to each resource item to be listed.
|
||||
If the expression evaluates True, then that item is listed. For more
|
||||
details and examples of filter expressions, run $ gcloud topic filters.
|
||||
This flag interacts with other flags that are applied in this order:
|
||||
--flatten, --sort-by, --filter, --limit.
|
||||
|
||||
--limit=LIMIT
|
||||
Maximum number of resources to list. The default is unlimited. This
|
||||
flag interacts with other flags that are applied in this order:
|
||||
--flatten, --sort-by, --filter, --limit.
|
||||
|
||||
--page-size=PAGE_SIZE
|
||||
Some services group resource list output into pages. This flag
|
||||
specifies the maximum number of resources per page. The default is
|
||||
determined by the service if it supports paging, otherwise it is
|
||||
unlimited (no paging). Paging may be applied before or after --filter
|
||||
and --limit depending on the service.
|
||||
|
||||
--sort-by=[FIELD,...]
|
||||
Comma-separated list of resource field key names to sort by. The
|
||||
default order is ascending. Prefix a field with ``~'' for descending
|
||||
order on that field. This flag interacts with other flags that are
|
||||
applied in this order: --flatten, --sort-by, --filter, --limit.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the compute/v1 API. The full documentation for this API
|
||||
can be found at: https://cloud.google.com/compute/
|
||||
|
||||
NOTES
|
||||
These variants are also available:
|
||||
|
||||
$ gcloud alpha compute backend-services get-iam-policy
|
||||
|
||||
$ gcloud beta compute backend-services get-iam-policy
|
||||
|
||||
|
|
@ -27,6 +27,9 @@ COMMANDS
|
|||
add-backend
|
||||
Add a backend to a backend service.
|
||||
|
||||
add-iam-policy-binding
|
||||
Add an IAM policy binding to a Compute Engine backend service.
|
||||
|
||||
add-service-bindings
|
||||
Add service bindings to a backend service.
|
||||
|
||||
|
|
@ -54,6 +57,9 @@ COMMANDS
|
|||
get-health
|
||||
Get backend health statuses from a backend service.
|
||||
|
||||
get-iam-policy
|
||||
Get the IAM policy for a Compute Engine backend service.
|
||||
|
||||
import
|
||||
Import a backend service.
|
||||
|
||||
|
|
@ -63,9 +69,15 @@ COMMANDS
|
|||
remove-backend
|
||||
Remove a backend from a backend service.
|
||||
|
||||
remove-iam-policy-binding
|
||||
Remove an IAM policy binding from a Compute Engine backend service.
|
||||
|
||||
remove-service-bindings
|
||||
Remove service bindings from a backend service.
|
||||
|
||||
set-iam-policy
|
||||
Set the IAM policy binding for a Compute Engine backend service.
|
||||
|
||||
update
|
||||
Update a backend service.
|
||||
|
||||
|
|
|
|||
95
gcloud/compute/backend-services/remove-iam-policy-binding
Normal file
95
gcloud/compute/backend-services/remove-iam-policy-binding
Normal file
|
|
@ -0,0 +1,95 @@
|
|||
NAME
|
||||
gcloud compute backend-services remove-iam-policy-binding - remove an IAM
|
||||
policy binding from a Compute Engine backend service
|
||||
|
||||
SYNOPSIS
|
||||
gcloud compute backend-services remove-iam-policy-binding
|
||||
(BACKEND_SERVICE : --region=REGION) --member=PRINCIPAL --role=ROLE
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Remove an IAM policy binding from a Compute Engine backend service.
|
||||
|
||||
EXAMPLES
|
||||
To remove an IAM policy binding for the role of
|
||||
'roles/compute.loadBalancerServiceUser' for the user 'test-user@gmail.com'
|
||||
with backend service 'my-backend-service' and region 'REGION', run:
|
||||
|
||||
$ gcloud compute backend-services remove-iam-policy-binding \
|
||||
my-backend-service --region=REGION \
|
||||
--member='user:test-user@gmail.com' \
|
||||
--role='roles/compute.loadBalancerServiceUser'
|
||||
|
||||
See https://cloud.google.com/iam/docs/managing-policies for details of
|
||||
policy role and member types.
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Backend service resource - The backend service for which to remove the IAM
|
||||
policy from. The arguments in this group can be used to specify the
|
||||
attributes of this resource. (NOTE) Some attributes are not given
|
||||
arguments in this group but can be set in other ways. To set the project
|
||||
attribute:
|
||||
◆ provide the argument backend_service on the command line with a fully
|
||||
specified name;
|
||||
◆ set the property core/project;
|
||||
◆ provide the argument --project on the command line.
|
||||
|
||||
This must be specified.
|
||||
|
||||
BACKEND_SERVICE
|
||||
ID of the backend service or fully qualified identifier for the
|
||||
backend service. To set the backend_service attribute:
|
||||
▸ provide the argument backend_service on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--region=REGION
|
||||
The name of the Google Compute Engine region. To set the region
|
||||
attribute:
|
||||
▸ provide the argument backend_service on the command line with a
|
||||
fully specified name;
|
||||
▸ provide the argument --region on the command line;
|
||||
▸ set the property compute/region.
|
||||
|
||||
REQUIRED FLAGS
|
||||
--member=PRINCIPAL
|
||||
The principal to remove the binding for. Should be of the form
|
||||
user|group|serviceAccount:email or domain:domain.
|
||||
|
||||
Examples: user:test-user@gmail.com, group:admins@example.com,
|
||||
serviceAccount:test123@example.domain.com, or
|
||||
domain:example.domain.com.
|
||||
|
||||
Deleted principals have an additional deleted: prefix and a ?uid=UID
|
||||
suffix, where UID is a unique identifier for the principal. Example:
|
||||
deleted:user:test-user@gmail.com?uid=123456789012345678901.
|
||||
|
||||
Some resources also accept the following special values:
|
||||
◆ allUsers - Special identifier that represents anyone who is on the
|
||||
internet, with or without a Google account.
|
||||
◆ allAuthenticatedUsers - Special identifier that represents anyone
|
||||
who is authenticated with a Google account or a service account.
|
||||
|
||||
--role=ROLE
|
||||
The role to remove the principal from.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the compute/v1 API. The full documentation for this API
|
||||
can be found at: https://cloud.google.com/compute/
|
||||
|
||||
NOTES
|
||||
These variants are also available:
|
||||
|
||||
$ gcloud alpha compute backend-services remove-iam-policy-binding
|
||||
|
||||
$ gcloud beta compute backend-services remove-iam-policy-binding
|
||||
|
||||
76
gcloud/compute/backend-services/set-iam-policy
Normal file
76
gcloud/compute/backend-services/set-iam-policy
Normal file
|
|
@ -0,0 +1,76 @@
|
|||
NAME
|
||||
gcloud compute backend-services set-iam-policy - set the IAM policy binding
|
||||
for a Compute Engine backend service
|
||||
|
||||
SYNOPSIS
|
||||
gcloud compute backend-services set-iam-policy
|
||||
(BACKEND_SERVICE : --region=REGION) POLICY_FILE [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Sets the IAM policy for the given backend service as defined in a JSON or
|
||||
YAML file.
|
||||
|
||||
EXAMPLES
|
||||
The following command will read am IAM policy defined in a JSON file
|
||||
'policy.json' and set it for the backend service my-backend-service:
|
||||
|
||||
$ gcloud compute backend-services set-iam-policy \
|
||||
my-backend-service policy.json --region=REGION
|
||||
|
||||
See https://cloud.google.com/iam/docs/managing-policies for details of the
|
||||
policy file format and contents.
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Backend service resource - The backend service to set the IAM policy for.
|
||||
The arguments in this group can be used to specify the attributes of this
|
||||
resource. (NOTE) Some attributes are not given arguments in this group but
|
||||
can be set in other ways. To set the project attribute:
|
||||
◆ provide the argument backend_service on the command line with a fully
|
||||
specified name;
|
||||
◆ set the property core/project;
|
||||
◆ provide the argument --project on the command line.
|
||||
|
||||
This must be specified.
|
||||
|
||||
BACKEND_SERVICE
|
||||
ID of the backend service or fully qualified identifier for the
|
||||
backend service. To set the backend_service attribute:
|
||||
▸ provide the argument backend_service on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--region=REGION
|
||||
The name of the Google Compute Engine region. To set the region
|
||||
attribute:
|
||||
▸ provide the argument backend_service on the command line with a
|
||||
fully specified name;
|
||||
▸ provide the argument --region on the command line;
|
||||
▸ set the property compute/region.
|
||||
|
||||
POLICY_FILE
|
||||
Path to a local JSON or YAML formatted file containing a valid policy.
|
||||
|
||||
The output of the get-iam-policy command is a valid file, as is any
|
||||
JSON or YAML file conforming to the structure of a Policy
|
||||
(https://cloud.google.com/iam/reference/rest/v1/Policy).
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the compute/v1 API. The full documentation for this API
|
||||
can be found at: https://cloud.google.com/compute/
|
||||
|
||||
NOTES
|
||||
These variants are also available:
|
||||
|
||||
$ gcloud alpha compute backend-services set-iam-policy
|
||||
|
||||
$ gcloud beta compute backend-services set-iam-policy
|
||||
|
||||
|
|
@ -183,7 +183,8 @@ FLAGS
|
|||
service.
|
||||
|
||||
--no-health-checks
|
||||
Removes all health checks for the backend service.
|
||||
Removes all health checks for the backend service if the backend
|
||||
service has no backends attached.
|
||||
|
||||
--http-health-checks=HTTP_HEALTH_CHECK,[...]
|
||||
Specifies a list of legacy HTTP health check objects for checking the
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue